CGA-96rm-cc48-29vq

Summary

Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop

Description

Impact

There is a vulnerability in GO managing malformed DNS message, which impacts Traefik. This vulnerability could be exploited to cause a denial of service.

References

• CVE-2024-24788

Patches

• https://github.com/traefik/traefik/releases/tag/v2.11.3
• https://github.com/traefik/traefik/releases/tag/v3.0.1

Workarounds

No workaround.

For more information

If you have any questions or comments about this advisory, please open an issue.